Static task
static1
Behavioral task
behavioral1
Sample
383f6fefe3304d869e8e87e860c2efdf_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
383f6fefe3304d869e8e87e860c2efdf_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
383f6fefe3304d869e8e87e860c2efdf_JaffaCakes118
-
Size
51KB
-
MD5
383f6fefe3304d869e8e87e860c2efdf
-
SHA1
4247a3654af3de4bdbcfde18e6e75f0e338c1986
-
SHA256
108bbf0228692663358ed57231d44c3429be8001ed75bc5b9e898b54cc360e67
-
SHA512
930c2c60f57b7eaf2e0da8dfce84e5d1b28899e55f68934ad7db11124ed866ae32d081374a79999937ff5eed0cf89f7c3b650a3fb3b2ee021ce0aa90494373fc
-
SSDEEP
1536:jINg1Zl2X4XgTbdsO1DmF7gpDh47kJfPLivi5meGPX:jINaUX4XUdste4QJfP9KX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 383f6fefe3304d869e8e87e860c2efdf_JaffaCakes118
Files
-
383f6fefe3304d869e8e87e860c2efdf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 44KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RCryptor Size: 49B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ